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Developing an effective crime prevention program requires some careful thought and detailed planning. 
Businesses must be able to identify and understand those risks which confront them. They must be able 
to accurately determine their probable exposure to such risks. They must have an understanding of their 
current level of protection, and evaluate the need for improved measures. Normally, the most effective 
method of evaluating one security program is to have a Security Survey conducted by a professional 
security auditor. And finally, these improvements, if any, must be incorporated into the current security 
and safety program. The key to effective risk management is planning. 

Understanding Crime Risk 

Before a crime risk can be identified, reduced, or prevented, we first must have an understanding of what 
a crime is. A crime can be defined as: the commission of an act which violates an established law. This 
is the definition of crime in its simplest terms. However, we must realize that while the concept of crime 
is simple, the true nature of crime is much more complex. Millions of crimes occur annually in the 
United States. On the surface, it would appear that all of these crimes have very little, if nothing, in 
common with each other. However, under closer examination we will find that these crimes have more in 
common with each other than we think. 

A crime is the product, or result of an individual’s criminal behavior. Human behavior is never a random 
occurrence, but a specific action which has a definite goal in mind. People basically think and act in 
much the same manner both psychologically and physically. We all have the same basic emotions, 
reactions to physical discomfort, we walk and talk, we have desires, needs, and goals, and a host of other 
similarities. These behavioral similarities can be identified and modeled because they occur within a 
structure. The only exception to this rule may be those individuals who suffer from genetic psychological 
disorders, or persons suffering from diseases that damage the brain’s functions. 

Since criminal behavior is a human behavior, we can assume that it has a structure to it as well. And if 
you assumed this to be true, your correct. There are certain common aspects, or elements, which are 
present in criminal behavior, as well as, criminal acts. This is not theory, but scientific fact. Criminals 
behave and operate in much the same way, even though they may have nothing else in common with each 
other. However, another aspect of human behavior which must also be given consideration is, human 
behavior is difficult, if not impossible, to predict in advance. Generally, we have no way of knowing 
when or where the next crime will occur, or who will commit that crime. This is the aspect of crime 
which is interpreted as randomness. Beyond this fact, once a crime has occurred, certain elements of the 
crime will be common and consistent with others, even though no two crimes are the same. These 
elements include such things as: motivations, methods, criminal histories, tools or weapons used, types of 
evidence left at crime scenes, etc.. These commonalities are what forensic science refers to as the 
elements of the crime. It is this common structure of crime that needs to be dissected and studied in 
order to obtain a better understanding of these acts. All criminal acts possess three fundamental elements: 
desire, ability, opportunity. 



Desire 


An individual must possess the desire to commit a criminal act before one can occur. Desire can also be 
called motivation or intent. Desire is the psychological element of the criminal process. An individual’s 
motivation for committing a crime could be financial gain, revenge, a political agenda, a fantasy driven 
by a psychopathic disorder, or any number of other motivations. Since the desire to commit a crime 
stems from a psychological or emotional process, it is very difficult, if not totally impossible, to control or 
predict it. No one can realistically control or predict another persons thoughts or emotions, and it’s these 
very thoughts and emotions that will drive the criminal act. The most we can realistically do, is attempt 
to influence an individual and hope that they convince themselves not to commit a crime. 

Ability 

An individual must also possess the ability to commit a crime. Possessing the ability to commit a crime 
means the individual must have the necessary physical capabilities, skill, knowledge, the proper 
tools, etc. This element in the criminal process is also difficult, if not impossible, to control. In our 
society, there is no way to realistically control an individual’s physical capabilities, capacity for learning 
or developing skills, the instruments he / she has access to, availability of information, etc.. Developing 
the physical abilities which could be utilized for criminal activity, in and of itself, is not the problem. It’s 
when these abilities are combined with the desire to co mm it criminal acts that it becomes a problem. 

Opportunity 

The last element in the criminal process is opportunity. An opportunity to commit a crime must be 
present, before one can be committed. This means there must be a target of the criminal act. This final 
element of the criminal process is one that we do possess some degree of control over, because criminals 
don’t select targets by accident. There is a structure to the way in which criminals select their intended 
targets. Criminals select their targets based on a specific criteria. This target selection criteria is based on 
four key elements: 

Suitability: the criminal must consider the target to be suitable for his needs. 

Vulnerability: the target must be vulnerable to the criminal’s attack. 

Accessibility: the criminal must be able to gain access to the target for the amount of time 
necessary to commit the act. 

Risk present: the criminal must consider the level of risk associated with the commission of the 
crime. Will he / she be able to escape after committing the crime, what level of resistance will be 
confronted, will the police interdict? These are all aspects that will be considered prior to 
committing the crime. 

It is important to understand the relationship between this target selection criteria and opportunity. If this 
selection process is the basis for choosing the right opportunity to co mm it a crime, and our goal is 
preventing the crime. We should then examine how we can interfere with this selection process in a way 
which reduces the likelihood of the crime occurring. 



Potential targets can be classified as either “soft targets” or “hard targets”. Soft targets are ones in 
which minimal, if any, protective measures are employed to defend against criminal attack. Hard targets 
are ones in which extensive protective measures are employed to defend against criminal attack. 
Statistically, soft targets are attacked more often, than are hard targets, due to their vulnerability to the 
attack. In general, criminals would rather attack a target which is less prepared, than one that is on the 
defense against such activity. 

Reducing potential vulnerability by increasing protective measures may be most effective method of 
preventing criminal attacks. If we increase our levels of physical, technical, and procedural security 
measures we become a harder target to attack. This increase in security should result in limiting access 
required to the target, as well as, increasing the risk the criminal faces. The less vulnerable we are to a 
criminal’s attack, the less suitable we are as a potential target. The ultimate goal is to become an 
unsuitable target. This goal can only be achieved through the application of specific risk management 
principles, in systematic and realistic manner. 

Principles of Risk Management 

Most crime risks, and accident risks as well, can be reduced to some manageable level through the 
application of one or more of the following risk management principles: 

Risk Avoidance 

Risk avoidance means that if the object at risk is removed completely from the threat environment, the 
risk will be avoided. For example, if you were concerned about the threat of theft of a valuable coin 
collection maintained in your residence, this risk could be avoided if the coin collection was removed 
from the residence and secured in a hank safety deposit box. 

Risk Reduction 

If the object at risk cannot be completely removed from the threat environment, than measures must be 
taken to reduce the threat. Reducing risk can be accomplished through the application of physical, 
technical, and procedural security measures. 

Physical Security Measures, are considered those things which create a physical 
protective barrier around the object at risk. Typical physical measures include: fences, 
gates, walls, barricades, doors, windows, locks, safes, bullet resistant glass, Security 
Officers, Security Dogs, etc. 

Technical Security Measures, are considered those things which operate electronically 
and include: alarm systems, CCTV, electronic ID card reading access control systems, 
bio-metric access control systems, lighting, etc. 


Procedural Security Measures, are those routine actions we take to either prevent, or 
respond, to crime. Protective procedures can include: security patrolling, establishing 
safety and security policies, checking ID cards or other forms of access verification, 
auditing and inventory control, cash depositing, giving sales receipts, escorting 
employees to their cars, evacuations, managing a crime or accident scene, report writing, 
or any number of procedures which may be utilized to enhance security and safety. 



Risk Transfer 


The objective of this principle is to transfer a potential threat to someone or something else. The most 
common form of risk transfer is to insure the object at risk. By insuring the object, it allows you to 
recover financially from an attack. The potential loss resulting from a criminal attack is transferred to the 
insurance company. 

Risk Acceptance 

Lastly, it should be realized that the possibility of completely eliminating risk can never be truly 
accomplished. There is no guarantee that a risk will not manifest itself, no matter would measures are 
taken. This is a simply fact that must be understood and accepted. 

The application of these risk management principles won’t completely eliminate the possibility of crimes 
or accidents occurring. However, it should allow for the reduction of the likelihood of these incidents 
occurring. The extent to which any individual risk management principle, or combination of principles, is 
applied will depend upon what is being protected and the level of threat in the environment. 
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